Last updated: July 2026
- Introduction
This Privacy Policy aims to clearly and transparently inform about the processing of personal data carried out by Drive and Win, S.L.U., owner of the commercial brand DayCover, in compliance with Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD), and other applicable regulations.
At DayCover we are committed to protecting the privacy of our users, clients and potential clients, ensuring that their personal data is processed lawfully, fairly, transparently and securely.
This Policy applies to:
- Users who visit the DayCover website.
- Individuals who request information or obtain a quote.
- Policyholders, insured persons and beneficiaries of policies marketed by DayCover.
- Users of the DayCover mobile application.
- Individuals who subscribe to commercial communications or newsletters.
The use of our services involves the processing of personal data to the extent necessary to provide the requested services and fulfil the legal obligations arising from our activity.
- Data Controller
Data Controller
Drive and Win, S.L.U.
Commercial brand: DayCover
NIF: B57934077
Registered address:
Av. Almirante Riera Alemany, 1
07157 Port d’Andratx
Illes Balears (España)
Phone:
911 442 368
Contact email:
Email for data protection matters:
- Personal data we collect
Depending on the service requested and your relationship with DayCover, we may process the following categories of personal data:
Identification data
- Full name.
- National ID, NIE or equivalent document.
- Date of birth.
- Nationality.
Contact data
- Postal address.
- Email address.
- Phone number.
Insurance-related data
- Information required to prepare quotes.
- Information relating to contracted policies.
- Coverages.
- Contracting history.
- Information about claims when necessary.
Financial data
- Information required for the management of collections and payments.
- Solvency-related information where permitted by regulations and necessary for contracting.
Data derived from the use of the mobile application
When you use the DayCover application and grant the corresponding permissions, we may process:
- Geolocation data during journeys.
- Information about the physical activity of the device.
- Technical device data.
- Information relating to the start and end of journeys.
- Information related to possible distractions while driving, obtained through permissions granted on the device.
- Technical information necessary to ensure the correct functioning of the application.
The collection of this data aims to correctly provide the services associated with the policy and evaluate driving in accordance with the conditions of the contracted product.
Automatically obtained data
During browsing of our website we may collect technical information such as:
- IP address.
- Browser type.
- Operating system.
- Device identifiers.
- Date and time of access.
- Pages visited.
- Information obtained via cookies and similar technologies, in accordance with our Cookie Policy.
Voluntarily provided data
We will also process the information you provide when:
- You request a quote.
- You contact us via forms.
- You request information.
- You participate in promotions.
- You contact our customer service.
- How do we obtain your data?
The personal data processed by DayCover comes from different sources:
Data provided directly by you
When:
- you request a quote;
- you take out a policy;
- you use the mobile application;
- you contact our customer service;
- you complete forms;
- you participate in promotional campaigns;
- you subscribe to commercial communications.
Data generated during service provision
During the execution of the insurance contract, certain data is generated arising from:
- the use of the mobile application;
- policy management;
- claims handling;
- the provision of assistance;
- communications with DayCover.
Data from third parties
Where legally appropriate, we may obtain information from:
- insurance companies;
- insurance intermediaries;
- loss adjusters and partner companies;
- public registers;
- fraud prevention files;
- public bodies;
- financial institutions;
- other legally authorised sources.
In all cases, processing will only be carried out where there is a legal basis that legitimises it.
Third-party data provided by the user
If you provide us with personal data of other individuals, you guarantee that you have the necessary authorisation to do so and that those individuals have been informed of the processing of their data in accordance with current regulations.
- Purposes of processing
Your personal data may be processed for the following purposes:
Quote management
- Preparing insurance simulations and quotes.
- Contacting you to resolve queries related to your request.
- Managing the pre-contracting process.
Policy contracting and management
- Formalising the insurance contract.
- Managing the policy validity.
- Managing collections and payments.
- Handling incidents and claims.
- Providing the services associated with the contracted coverage.
Service provision via the mobile application
The permissions granted in the application allow:
- determining the start and end of journeys;
- identifying the route taken for the correct provision of the service;
- calculating the applicable speed limits during driving;
- detecting possible distractions while driving through permissions authorised on the device;
- providing the services included in the contracted policy;
- improving the technical functioning of the application.
DayCover will only process this information for the time necessary to provide the contracted services and in accordance with the purposes described in this Policy.
Customer service
Managing queries, complaints, information requests, incidents and any communication with our users and clients.
Fraud prevention
Detecting, investigating and preventing fraudulent activities related to the contracting or use of our services, as well as fulfilling the legal obligations established for the insurance sector.
Compliance with legal obligations
Fulfilling obligations arising from applicable regulations, including legislation on insurance, tax, commercial, fraud prevention, anti-money laundering where applicable and any other legally required obligation.
Commercial communications
Where there is a legal basis permitting it, we may send you information about DayCover products, promotions, news and services by electronic or conventional means.
You may object to receiving these communications at any time via the link included in each communication or by contacting us.
- Legal basis for processing
DayCover only processes your personal data where there is a valid legal basis in accordance with Regulation (EU) 2016/679 (GDPR).
Depending on the purpose, processing may be based on one or more of the following legal grounds:
- a) Performance of a contract
We process your data when it is necessary to:
- formalise an insurance policy;
- manage the contractual relationship;
- provide the services included in the policy;
- manage claims, incidents and renewals;
- enable the functioning of the mobile application associated with the contracted service.
If you do not provide the necessary data for these purposes, we may not be able to formalise the contract or correctly provide our services.
- b) Compliance with legal obligations
DayCover will process certain personal data where necessary to comply with legal obligations arising from, among others:
- regulations governing insurance activity;
- tax and fiscal regulations;
- commercial regulations;
- fraud prevention regulations;
- requirements from administrative or judicial authorities;
- any other applicable legal obligation.
- c) Legitimate interest
In certain circumstances we may process your data on the basis of our legitimate interest, provided that such interest does not override your rights and freedoms.
This legitimate interest includes, among others:
- improving the quality of our services;
- ensuring the security of our systems;
- preventing fraudulent use;
- managing complaints;
- carrying out internal statistics;
- conducting quality controls;
- defending our rights in possible administrative or judicial proceedings;
- sending commercial communications related to products or services similar to those previously contracted, where regulations permit.
In all these cases we carry out a prior assessment to ensure that such processing does not disproportionately affect your rights.
- d) Consent
Where regulations require it, we will request your consent before processing your data.
This occurs, for example, when:
- you accept certain non-necessary cookies;
- you authorise the sending of commercial communications where there is no other legal basis;
- you authorise optional application processes that are not essential for the provision of the service.
You may withdraw your consent at any time, without this affecting the lawfulness of processing carried out prior to withdrawal.
- Use of the mobile application
The DayCover mobile application is an essential part of the insurance products marketed by the company.
To correctly provide these services, the application may require certain device permissions.
Geolocation
The application may access the device location during journeys made by the user.
This data is used exclusively to:
- record journeys;
- determine the road on which the vehicle is travelling;
- identify the applicable speed limit;
- calculate driving-related indicators when they form part of the contracted product;
- provide the services included in the policy.
Geolocation is not used for purposes other than those expressly stated in this Policy.
Physical activity
The application may use information provided by the device sensors to detect the start and end of a journey.
This information allows the application to be optimised and battery consumption reduced, avoiding unnecessary data collection when there is no driving-related activity.
Device permissions
Depending on the operating system and the version installed, the application may request certain necessary permissions to:
- detect possible distractions while driving;
- ensure the correct technical functioning of the application;
- improve the accuracy of journey detection;
- provide the contracted services.
The user can manage these permissions from the device settings. However, disabling certain permissions may prevent the correct functioning of some application features or affect the provision of certain services included in the policy.
- Profiling
In order to provide certain insurance products, DayCover may carry out processing involving the creation of profiles related to the use of the application and the user’s driving habits.
These profiles may be used exclusively for purposes such as:
- calculating driving-related indicators;
- applying the conditions of the contracted insurance product;
- detecting anomalous or potentially fraudulent behaviour;
- improving the functioning of our services.
In no case will decisions be made based solely on automated processing that produce legal effects on the data subject or significantly affect them, unless such processing is authorised by applicable regulations, is necessary for the performance of the contract or has the express consent of the data subject.
Where regulations require it, the user may request human intervention, express their point of view and contest the decision taken.
- Commercial communications
DayCover may send commercial information relating to its products and services by electronic or conventional means where there is a legal basis permitting it.
These communications may be made via:
- email;
- SMS;
- application notifications;
- telephone;
- other equivalent means of communication.
Where communications are based on consent, this may be withdrawn at any time.
Where they are based on the legitimate interest arising from a prior contractual relationship and relate to products or services similar to those contracted, the user may object free of charge from the moment of data collection and in each communication received, in accordance with Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
DayCover uses Brevo as a platform for managing email marketing campaigns and electronic communications. This provider acts as a data processor and processes personal data following our instructions and applying the security measures required by data protection regulations.
- Technological tools used
In order to ensure the functioning of our services and improve the user experience, DayCover uses different technological solutions provided by third parties.
These include, where applicable:
- Google Analytics, to obtain website browsing and usage statistics.
- Google Maps, for map and geolocation-related functionalities.
- Firebase, for the technical management of the mobile application and certain associated services.
- Firebase Crashlytics, to detect technical errors, improve application stability and resolve incidents.
- Brevo, for the management of commercial communications and newsletters.
These tools may process technical device information, identifiers, IP addresses or other information necessary to provide their respective services.
Where the use of these technologies requires user consent, this will be requested in advance through the mechanisms provided for that purpose, especially in relation to cookies and equivalent technologies.
You can obtain further information about the use of these technologies in our Cookie Policy.
- Recipients of personal data
DayCover will only disclose your personal data where necessary for the provision of contracted services, for compliance with legal obligations or where there is another legal basis legitimising such disclosure.
Depending on the nature of the contracted service, your data may be disclosed to the following categories of recipients:
Insurance companies
Where necessary for the preparation of quotes, contracting, issuance, management, renewal or cancellation of policies, as well as for the handling of claims or the provision of contracted coverages.
Insurance sector intermediaries and collaborators
Insurance brokers, loss adjusters, assistance companies, garages, legal professionals, roadside assistance providers, reinsurers and other collaborators necessary for the correct execution of the insurance contract.
Financial institutions
For the purpose of managing collections, refunds, payments and other financial operations arising from the contractual relationship.
Public Administrations and competent authorities
Where there is a legal obligation or a valid requirement from administrative, judicial or competent authorities.
Technology service providers
DayCover has specialised providers acting as data processors, providing services necessary for the functioning of the activity, including:
- website hosting;
- hosting and maintenance of the technological infrastructure;
- servicios de email;
- analytics platforms;
- monitoring and security tools;
- commercial communications sending platforms;
- mobile application maintenance and technical support services.
All these providers only access the information necessary to provide their services and do so following DayCover’s instructions and in accordance with the data processing contracts required by article 28 of the GDPR.
- Technology providers
DayCover currently uses, among others, the following technology providers:
IONOS
Website hosting provider.
ANS (United Kingdom)
Infrastructure and API services provider used for the functioning of the mobile application.
For certain technological services, including:
- Google Analytics.
- Google Maps.
- Firebase.
- Firebase Crashlytics.
Brevo
Proveedor utilizado para la gestión de comunicaciones comerciales, newsletters y campañas de email marketing.
These providers may process certain personal data exclusively for the provision of services contracted by DayCover and always in accordance with our instructions.
The relationship with all of them is governed by the corresponding data processing contracts where required by applicable regulations.
- International data transfers
Some of the technology providers used by DayCover may be located outside the European Economic Area or carry out international data transfers.
When this occurs, DayCover will ensure that such transfers are only made where one of the safeguards provided for in articles 44 et seq. of the General Data Protection Regulation exists.
These safeguards may consist of, among others:
- adequacy decisions adopted by the European Commission;
- standard contractual clauses approved by the European Commission;
- binding corporate rules;
- or other legally recognised mechanisms.
In particular, certain services provided from the United Kingdom may involve an international data transfer. Such transfers will be made with the safeguards provided by the applicable regulations in force at any given time.
- Retention periods
Personal data will only be retained for the time necessary to fulfil the purposes for which it was collected and, subsequently, for the periods required by applicable legislation.
As a general rule:
Information requests
Data provided via contact forms will be retained for the time necessary to respond to the query and, subsequently, for the periods necessary to address possible legal liabilities.
Quote requests
Data used to prepare quotes will be retained while the quote remains valid and, where the user authorises it or a legal basis permits it, for the time necessary to contact the data subject again and offer them new commercial proposals related to our products.
Clients with a contracted policy
Personal data will be retained throughout the duration of the contractual relationship.
Once this has ended, it will be retained duly blocked for the limitation periods established by applicable regulations, including commercial, tax, insurance and any other applicable legislation.
Data obtained via the mobile application
Data generated during the use of the application will be retained only for the time necessary to provide the services associated with the policy, comply with legal obligations and address possible liabilities arising from the contractual relationship.
They will subsequently be deleted or anonymised where possible.
Commercial communications
Data used for sending commercial communications will be retained until the data subject withdraws their consent or exercises their right to object, as appropriate.
- Exercise of the right to erasure
The data subject may request the erasure of their personal data at any time under the terms provided for in article 17 of Regulation (EU) 2016/679.
However, the exercise of this right may be limited where there is a legal obligation requiring the retention of certain information.
In particular, when the user has taken out an insurance policy through DayCover, Drive and Win, S.L.U. will be legally required to retain the personal data and documentation linked to that policy for the periods established by applicable regulations on insurance, tax, commercial, fraud prevention and other legal obligations.
In these cases:
- the erasure request will be addressed with respect to those data whose deletion is legally possible;
- data whose retention is mandatory will remain duly blocked, with restricted access and only to address legal obligations, the exercise or defence of claims or possible liabilities arising from the contractual relationship;
- once the legal retention periods have ended, such data will be deleted securely.
If the user did not formalise a policy and there is no other legal retention obligation, their data will be deleted in accordance with current regulations.
- Rights of data subjects
In accordance with current data protection regulations, you may exercise the following rights at any time with respect to the processing of your personal data:
Right of access
To request confirmation as to whether DayCover is processing your personal data and to obtain information about such processing, as well as a copy of the data subject to it.
Right of rectification
To request the modification of personal data that is inaccurate, incomplete or outdated.
Right to erasure
To request the deletion of your personal data where the circumstances provided for in article 17 of the GDPR are met, without prejudice to the limitations arising from the legal retention obligations indicated in this Policy.
Right to restriction of processing
To request that we restrict the processing of your data in the cases provided for by regulations.
Right to object
To object to the processing of your data where it is based on DayCover’s legitimate interest or when used for sending commercial communications.
Right to data portability
To request the delivery of personal data you have provided to us in a structured, commonly used and machine-readable format, or for it to be transmitted directly to another controller where technically possible.
Right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time. The withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.
- How can you exercise your rights?
You may exercise any of the aforementioned rights by submitting a request to:
Drive and Win, S.L.U.
Av. Almirante Riera Alemany, 1
07157 Port d’Andratx
Illes Balears (España)
Correo electrónico:
To ensure the security of the information, we may request the necessary documentation to verify your identity where reasonable or legally required.
We will respond to your request within the timeframes established by current regulations.
- Right to lodge a complaint
If you consider that the processing of your personal data does not comply with applicable regulations, you may lodge a complaint with the competent supervisory authority.
In Spain, the competent authority is:
Spanish Data Protection Agency (AEPD)
C/ Jorge Juan, 6
28001 Madrid
You can obtain further information or lodge a complaint through their official website:
This is without prejudice to any other administrative or judicial remedy available to you.
- Security measures
DayCover applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk arising from the processing of personal data.
Among other measures, procedures are adopted to:
- protect the confidentiality of information;
- prevent unauthorised access;
- prevent accidental loss, alteration or destruction of data;
- ensure system availability;
- restore information in the event of an incident;
- periodically review the effectiveness of the security measures implemented.
However, no system can guarantee absolute security. Therefore, although DayCover takes all reasonable measures to protect information, it cannot ensure total invulnerability of systems against incidents arising from third parties or circumstances beyond its control.
- Minors
The services offered by DayCover are not directed at minors.
We do not knowingly collect personal data from minors without the corresponding authorisation from whoever holds parental responsibility or guardianship where legally required.
If we detect that personal data of a minor has been collected improperly, we will proceed to take the appropriate measures for its deletion or regularisation in accordance with applicable regulations.
- Links to third-party websites
The DayCover website and mobile application may include links to third-party websites, applications or services.
DayCover is not responsible for the privacy policies, content or practices of such sites, so we recommend consulting their respective privacy policies before providing any personal data.
- Modifications to this Privacy Policy
DayCover may update this Privacy Policy when necessary to adapt it to regulatory changes, criteria from supervisory authorities, modifications to the services provided or improvements to our internal processes.
When modifications are relevant and significantly affect the processing of personal data, we will inform of them through appropriate channels.
The version published on our website will at all times be the current version.
The date of the last update will appear at the beginning of this document.
- Contact
If you have any queries related to this Privacy Policy or the processing of your personal data, you can contact us via:
Drive and Win, S.L.U.
Commercial brand: DayCover
Av. Almirante Riera Alemany, 1
07157 Port d’Andratx
Illes Balears (España)
Correo electrónico:
Corporate email:
Phone:
911 442 368
We will be happy to assist with any queries related to the protection of your personal data.
- Applicable legislation
This Privacy Policy is interpreted and applied in accordance with:
- Regulation (EU) 2016/679, General Data Protection Regulation (GDPR).
- Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
- Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
- Any other Spanish or European Union regulations applicable to the processing of personal data and the insurance activity carried out by Drive and Win, S.L.U.